diff --git a/requirements-app.txt b/requirements-app.txt
index d2bd53f6d..7ac863e6d 100644
--- a/requirements-app.txt
+++ b/requirements-app.txt
@@ -19,9 +19,7 @@ notifications-python-client==5.5.1
 
 # PaaS
 awscli-cwlogs>=1.4,<1.5
-
-# Putting upgrade on hold due to v1.0.0 using sha512 instead of sha1 by default
-itsdangerous==0.24  # pyup: <1.0.0
+itsdangerous==1.1.0
 
 git+https://github.com/alphagov/notifications-utils.git@36.6.0#egg=notifications-utils==36.6.0
 git+https://github.com/alphagov/govuk-frontend-jinja.git@v0.5.1-alpha#egg=govuk-frontend-jinja==0.5.1-alpha
diff --git a/requirements.txt b/requirements.txt
index 89e522545..335cee4a9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -21,18 +21,16 @@ notifications-python-client==5.5.1
 
 # PaaS
 awscli-cwlogs>=1.4,<1.5
-
-# Putting upgrade on hold due to v1.0.0 using sha512 instead of sha1 by default
-itsdangerous==0.24  # pyup: <1.0.0
+itsdangerous==1.1.0
 
 git+https://github.com/alphagov/notifications-utils.git@36.6.0#egg=notifications-utils==36.6.0
 git+https://github.com/alphagov/govuk-frontend-jinja.git@v0.5.1-alpha#egg=govuk-frontend-jinja==0.5.1-alpha
 
 ## The following requirements were added by pip freeze:
-awscli==1.17.15
+awscli==1.18.2
 bleach==3.1.0
 boto3==1.10.38
-botocore==1.14.15
+botocore==1.15.2
 certifi==2019.11.28
 chardet==3.0.4
 Click==7.0